CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-105811 MEDIUM · 6.5 Autorisatieomzeiling via een door de gebruiker gecontroleerde sleutel in het optionele Amazon Q Business Lambda-haakmonster (q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambda_hooks/README.md), beschikbaar bij QnABot op AWS-versies 7.0.0 tot en…
- CVE-2026-104046 MEDIUM · 6.2 A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being… Fedoraproject Redhat
- CVE-2026-104045 MEDIUM · 4.7 A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder… Fedoraproject Redhat
- CVE-2026-101258 HIGH · 7.8 A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell…
- CVE-2026-96589 MEDIUM · 4.3 When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so they can… Gitea
- CVE-2026-96580 HIGH · 7.5 Gitea breidde de statische 'strategy.matrix` van een workflow uit tot zijn volledige Cartesische product zonder een maximale grootte bij het maken van een run, voordat… Gitea
- CVE-2026-96404 HIGH · 8.1 When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has been reset to `false`, submitting the install… Gitea
- CVE-2026-96400 MEDIUM · 4.3 Met `[migrations] ALLOWED_DOMAINS` ingesteld op een overeenkomende vermelding zoals `*` of een hostnaam-jokerteken, kan de validatie van de migratie-URL van Gitea gereserveerde en link-local adressen… Gitea
- CVE-2026-96399 HIGH · 7.5 A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic… Gitea
- CVE-2026-95112 MEDIUM · 6.5 When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving… Gitea
- CVE-2026-95106 CRITICAL · 9.1 Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path… Gitea
- CVE-2026-94205 CRITICAL · 9.8 Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author.… Gitea
- CVE-2026-94114 MEDIUM · 5.9 Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed…
- CVE-2026-89430 HIGH · 8.1 Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed the stored… Gitea
- CVE-2026-79960 HIGH · 7.1 When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks in the push hook pipeline… Gitea
- CVE-2026-79818 MEDIUM · 5.3 A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow…
- CVE-2026-79817 MEDIUM · 5.5 A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access…
- CVE-2026-79816 MEDIUM · 6.3 A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting (XSS)…
- CVE-2026-79815 MEDIUM · 6.5 A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could…
- CVE-2026-79814 MEDIUM · 6.7 An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges…
- CVE-2026-79813 MEDIUM · 6.7 A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevated privileges…
- CVE-2026-79812 MEDIUM · 6.1 A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to…
- CVE-2026-79811 HIGH · 7.2 A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks…
- CVE-2026-79810 HIGH · 7.2 Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges…
- CVE-2026-79809 HIGH · 7.3 An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to…
- CVE-2026-79808 HIGH · 7.8 A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code…
- CVE-2026-79807 HIGH · 7.8 A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their…
- CVE-2026-79806 HIGH · 7.8 A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges.…
- CVE-2026-79805 CRITICAL · 9.8 An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying…
- CVE-2026-79803 HIGH · 8.8 A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain…
- CVE-2026-79802 HIGH · 8.8 A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted…
- CVE-2026-79801 CRITICAL · 9.8 A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted…
- CVE-2026-79800 HIGH · 8.8 An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to…
- CVE-2026-79799 HIGH · 8.8 A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack…
- CVE-2026-79798 CRITICAL · 9.9 SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against…
- CVE-2026-79797 HIGH · 8.8 An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted…
- CVE-2026-79796 CRITICAL · 9.8 Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls.…
- CVE-2026-79794 CRITICAL · 9.1 A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against…
- CVE-2026-76754 CRITICAL · 9.8 A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy…
- CVE-2026-76753 CRITICAL · 9.8 Een kwetsbaarheid van een format string in een getroffen service-interface van HPE Networking ClearPass Policy Manager kan een niet-geverifieerde externe aanvaller in staat stellen het…
- CVE-2026-76752 CRITICAL · 9.8 Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker…
- CVE-2026-76751 CRITICAL · 9.8 A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary…
- CVE-2026-76750 CRITICAL · 9.8 Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to…
- CVE-2026-76749 MEDIUM · 6.5 A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.
- CVE-2026-76748 HIGH · 8.8 A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative…
- CVE-2026-76747 CRITICAL · 9.1 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause…
- CVE-2026-76746 CRITICAL · 9.3 Een niet-geverifieerde bufferoverloopkwetsbaarheid bestaat in AOS-S. Succesvolle exploitatie kan een niet-geverifieerde aangrenzende aanvaller in staat stellen om gevoelige geheugeninhoud bloot te leggen en een denial…
- CVE-2026-76745 CRITICAL · 9.6 Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
- CVE-2026-76744 CRITICAL · 9.8 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
- CVE-2026-76743 CRITICAL · 9.8 A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if…